37711670f4834044d670a0f67716cca828296814b3d504cc5f3b22dbc76bf548

Analysis

max time kernel
145s
max time network
146s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
14-07-2024 06:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

449ea50fe2f607c3fdd5c005b25372cb_JaffaCakes118.html
Size

9KB
MD5

449ea50fe2f607c3fdd5c005b25372cb
SHA1

8c873e4a082cec0927d614f5c06ce681efd2d026
SHA256

37711670f4834044d670a0f67716cca828296814b3d504cc5f3b22dbc76bf548
SHA512

70be5704d615188770ab397e99cc042ad610d55e5138cb83175561d6005c1c081fde7b1b0c0af421f4d2f6d85367f1b96e7e3ce1d83ad4abb23969edf81f6539
SSDEEP

96:uzVs+ux7NFLLY1k9o84d12ef7CSTUaGT/kkZzps2k9ZslVHcEZ7ru7f:csz7NFAYS/rknAWPHb76f

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{3EEE4811-41A7-11EF-845E-D61F2295B977} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "427099071"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 80deea13b4d5da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000043174f1aa2314a47aa677ebd5ad1f6c700000000020000000000106600000001000020000000581fddc12a277b77cc96365d04a9f79328b2413c44428d68fea6a64f4fd291b7000000000e80000000020000200000000bac767dd582cba32f64da1e1ca79c5ebfe8b77636b78dfb6b1e2cf3d729184d2000000038e32885ea0988bf95f81d728d579ba143fa75466de7d01cc4332d44738cbf574000000006cda6df39c1da52b1742e0854023277cbbb0a14e270ba2462b19f1a71e5b5cf1be5591c3a15d5ca9a8dd4dec6031bf648daa0b9a986c27b09f4e5e6e4c15b3d	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2796	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2796	iexplore.exe
2796	iexplore.exe
2860	IEXPLORE.EXE
2860	IEXPLORE.EXE
2860	IEXPLORE.EXE
2860	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2796 wrote to memory of 2860	2796	iexplore.exe	31
PID 2796 wrote to memory of 2860	2796	iexplore.exe	31
PID 2796 wrote to memory of 2860	2796	iexplore.exe	31
PID 2796 wrote to memory of 2860	2796	iexplore.exe	31

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\449ea50fe2f607c3fdd5c005b25372cb_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2796
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2796 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2860

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4c0c637e8ea70b146b42f7fcff110e22

SHA1
313312743b451674966a21c2b71eeb0eac918136

SHA256
eddec8dfdf4e2c2233ec5451ee9b226a6c43a3a8e886c42740842567b507f7b0

SHA512
afa67e7fd05d12607ae4e23c1d3436ca67f7745374865c59c38967b022233c4faca532499acd15f408d3f03e98f223d10d62d7ff76d93784001ff5a0fa9b751b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
50e27fe39de50dfb509b8cec96b9f1f5

SHA1
d46a43ba1201e98b1fedb4b70218bc9ce1f9eefd

SHA256
569c7ec80ad82a7ad0f91f50986c230bf2e93b8b7f40f03d76c86170d5ac65be

SHA512
d3615ff1a0ee7c6bc1e6a51794a51aaddb7084131c7081665c9e730d70249db076756de21868d01a3d806d5fef07259b1112da3a0baf510f37065ba5b12fcb88

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c0951012c3f249c7d5b157787208f4f1

SHA1
ec80652e100b502073846664cfdc5ccfd5c0e473

SHA256
671f644964d004b978e55d3cfe002e465ef2a71b562cf9cb44d9ec022f78f6ea

SHA512
f2a13ab798d043e71ddb578080b2f7ec7d75481b58cfcdfe24066df56980a22395f3886ac0337ca57a23180a09a85b1ccdeb90e5e651861e271b298039adee91

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
49d4542bd0b19e30bfce1972f5a4481e

SHA1
51ab87d5d0444b11b3f93083d992c6b50dcac006

SHA256
8a12b025c307b54684aa64cad766b7fdbaee669322f6d31ae79d8c5aa0a71663

SHA512
b048d290b1ab3a9b9cae5d46c59cb585b19a747ffcc50fdbe6fda4627970f0532e0421277cb3d3123f958c86c07fa552153db362d4c5c9e6a23ef892b536a323

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
202aef0c99118c372c304fca344a571e

SHA1
38086deccce899b635f9c3e87a6c2ad49670d51e

SHA256
1363e4d20ad62794590cf9c7381f9bef0f061d84c6d1c5f0df6b537c53e9e494

SHA512
5964fea263e0695aa7b3e927126d230d9784616fabda8efbc2bd08cdb7cf6aae1d7dd80653d658c0c15ec88a6be3ff1af3bc256f673043e2961d53879f2bb8b1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
55e7f9a171e4f850c8d5ff43c65e01fa

SHA1
3c1eaaa9f1440535904298306eabd1d647113e2c

SHA256
d62e02415f35dd1e2eba45fec9645db5defde84ab6ae6608922a0347f1d02b17

SHA512
f6416233e4b17b7a5388a39c3d1bae77195a66ccef0e078e9e8634d6d19bcf9603ff8c3742c98f58e699ccd044fa2c97dbaaff421267f2eb4475d8dd118c26cd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
cf57bfd59e8047f2722f7c9f62053910

SHA1
38c546e401fd028775f7404d9f71de18f0d55c24

SHA256
b7131e5aafcc34c0868a0713601908b389276d204474437408838d9b50fc2086

SHA512
651fe8a32aa96428ecea825ad47b11c2f502dd369eabca20db29a8ba631acb80cf7d827619f37e8d2f0f71e944873c3f373c427d3edb0e341dddd6f1d08387ce

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ede2efc5b356e41f56fbd4c9594ab5a3

SHA1
844be4c3670c83891b77fda8b03fc89d533189a7

SHA256
a312f44d3b97537283e73e94a302de02e27b6f20a59fb43c60f3756f4f5daeb6

SHA512
dc894e7067b5485bc9df13fe7027de2d90589efcf9dc8e03e6b43c6543612e5989702792e836636fe4bba7c29c42e56cddefc5388291a74f8cad9bc1aa5f0e2a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
226aad221f3cd83b2b6c8971536374d5

SHA1
e10a0f9c7306f2ec1d8aa3763f750b6cfdfc8e6f

SHA256
c2c50ddfd0bcc6b84570267a1bc186245a0c71847625478286973238a11fa568

SHA512
eeb4f57a967c7f5eb119fe82b301c77294b51bd2aef2e399a4212f08073d9a8ad29a35e98bd0a7a0d33875aa3e3027a98914dd766a0e1ba7b1f2cad7c6281a48

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9298050f710cc90a0798f7682be2c223

SHA1
339720b928ed2ea0dd1edd0a2c8672e3f7df1512

SHA256
2c5836b9feb84b142dae413e976739ba813210932a9ab76ae728b116deabd10e

SHA512
a7f74eb8f928b43870d12754f7187763af04890f617c30f19da1ee3ac4d873dcd077acc81c443939ad1c6fce094478dcda27941c61b7c4c17730b574b1f6b3dd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
448054452b5e9676e8d93179e6ebd5c9

SHA1
85b95dd2f940f8361e92baf1aa7fa27ec9fe2214

SHA256
9d471e1e87cfb0cf0f0c1671e474abbb33a5f8e34043ead8a068f0c7e09ba252

SHA512
aa3d009b2cb221a62bd56929612f14d179cbe2c3c93e8686a032e6b2f8180933803dd963f0ec064f4dc58ef26f52a8b0f2b5b4315c819c2cd053dd94b78ad955

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
47831c41a0b4b8fb899cf9ea53ec0134

SHA1
60a118dc1c64d2bb73c723ca21dd55c3d9dd193d

SHA256
f8551b8bd1815897a130b40e7f47c28b2db777dd6cdf0d6d872722335ae30012

SHA512
77aab6142e6be55e32af18f1e173b768af5c878c009583e564189723ce81f5c3f1a0b31a2b92a0277563259dbbf44e0b163ab4bb591209a6bf5cb233380e5446

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9129f6d3c5cb0aecb665593183667ab9

SHA1
1e1b18cfce494028b7e90ca30a155e2822b10974

SHA256
d3a170759384401f6cc1d9cf28a9610130da66997ff75ae6bc9abc0f487f9434

SHA512
0db43efc8d0f1a8d06d32f11fd72e786d90a6795ef34bb3aa90900715d77946d3760777fa682dd803da89149312a4e75ac81a9d869ea857bb7c209aa6e3d923d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
cf4b83fe346783d03bac3e686c9a56d9

SHA1
9299851b12d84bd754759f8e6dbfaf12d80d87c3

SHA256
71d9711b18fa11fba094646d90f0f3f16bd8ceb62e62dbfc4d9d567968b0fda8

SHA512
83240fff97ee147764dd5ecb4e14e6b5ae957d70cb49365befb574c2166604a05b6db46a6f63d41f9ca475f1f05873d3431991af3bf238dd7e1e0ec8f888af2b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b42361affe10305e6a47e817c396b9a8

SHA1
0db276ed21058b7b34b8474ebfa07af0515f9bfd

SHA256
e3ce3ff19f174ca57b37b343d6d7729ad3d3efe2020a63b4f2724759eb679a69

SHA512
f50e6680502e3793da2f709331e62d930200bfe9e5260035c564da736d19339c0369e319027cc48c2d7a38feb44885234e5e1e6c0e5116cb7162a1bd378421c1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b43b2be57e28fe1b14a96c8cfd28e57f

SHA1
b0389be28b3122933fb97ed4ba5bd822853b1422

SHA256
65c3fe6a88a69acfb17ea330d9dd942c02e6cda7181af69c01583bf3a5b79d41

SHA512
33421aac3ed458abd785ab3605ade1a970dde45b04d85d0c9acdd41935ccc9a810728259fea465214f4e778d61d1fe16a7900d67eaf02db330a32c846f5e1a86

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9aa6ae629ed86136ae7be802a9cd4f3a

SHA1
8d0e1bd0fe9dbedbade9ab4f160388e1b93cd230

SHA256
b8df11aaca1bfa86833010728f268be05cce814c5fc9e220c272633f46557da7

SHA512
006cc2eba95ff174feafa0969d2956180648f39b3083416b8d372afdec93dc5178096b826c2ef46e81a37d7207f4dab30190fc667362f361e69e78911d1e19fe

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
00f4fe6d520f12adfa7e16067b84a237

SHA1
32943d502a2436c1ca44cb034e654939fe859ff4

SHA256
d2969307104ad8dac627a35feb255a9193165db2ffff40decebbfbb39b8d0461

SHA512
afeb4361b3c90e8cbbcc326b6324a81009f6eca759705d406d52058c7483daf85d901339e0852ca176bf6bf553cc17b4b1dd1fdec703c79eb9891174b2233058

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab8AB.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar91B.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit